Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 14 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Patch1 |
| 2026-04-15 | 1 | Disclosure1 |
CVE-2026-27922 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-27922
Post summary
The statement discloses that CVE-2026-27922 is a use‑after‑free vulnerability in Windows Ancillary Function Driver for WinSock capable of local privilege escalation, but provides no PoC, exploit, or patch information.
🪟 CVE in AFD.sys = Windows basically whispering “patch now, details later.” MSRC “confidence” talk means attackers won’t wait for the full postmortem—your downtime should. #WindowsSecurity https://windowsforum.com/threads/cve-2026-27922-and-afd-sys-why-patch-now-matters-with-msrc-confidence.413011/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LocalPrivilegeEscalation #WindowsKernelSecurity #Cve202627922
Post summary
The post highlights the urgency of patching CVE‑2026‑27922 in AFD.sys, describing it as a Local Privilege Escalation vulnerability, but it offers no concrete patch details, PoC, or active exploitation evidence.
25 of 25 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |